Files
computer-playbook/roles/web-app-nextcloud/meta/variants.yml
kevinveenbirkenbachandClaude Opus 5 a6411ebe58 fix(tor): stop rounds from claiming a surface the onion cannot reach
A variant that pins `services.tor.enabled: true` while enabling a role whose
own `meta/services.yml` pins `tor.enabled: false` declares a combination the
deployment cannot hold. The role rides no node onion, so on that round its
surface lives at a clearnet host no onion browser reaches, and the dashboard's
`frame-src 'self' http://*.<onion>` forbids embedding it outright. Run
36651124458 job 109692287333 shows the result: five specs fail at once,
dashboard tile, matomo tracker, css injection, logout and the coturn metric
label, all on hosts that are the only non-onion ones in the whole job.

web-app-nextcloud variant 11 was such a round: bigbluebutton on, tor on, while
bigbluebutton declares no onion. Variant 8 already answers the identical
question for PeerTube (65538c40da, "clearnet, because the OIDC plugin rejects a
plaintext onion issuer"), so variant 11 now does the same. With that,
bigbluebutton never meets a tor node and needs no consumer gates of its own.

Two roles keep a gate, for reasons that differ from each other:

web-app-seaweedfs is not clearnet-only. It deploys on tor as the object store
other roles reach over the internal network, and only its browser frontend is
off there, which `frontend.enabled` on main already says. Its logout, dashboard
and prometheus declarations claimed a surface that round does not deploy, so
they take the same gate the file's own frontend and sso blocks use.

web-svc-coturn belongs on a tor node and cannot serve one: STUN/TURN runs on
UDP plus a 20000-port relay range that no onion descriptor can publish, and its
only HTTP is a gateway answering a plaintext OK. Deploying it is right,
advertising it as a prometheus consumer is not, because that scrape goes
through the browser path. It is exempt from the rule itself, since it claims no
visitable surface, and its `dynamic-flag` markers now carry the reasons the
rule's own message asks for; one of the four was a duplicate of the line below
it and is gone.

The lint states the rule. It found these five pairings on its own, matching a
hand count made before it existed, and reports none after the variant fix.
`test_sso_variant_requires_tor` covers the complementary half, every variant of
a role that has an onion must pin it on, and exempts the clearnet-only role
itself; this rule covers the consumers that bind one. The suppression marker
belongs on the bound role when the reason is that role's own shape, because a
consumer-side marker would also silence every other clearnet role in the file.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
2026-10-08 08:57:12 +02:00

1382 lines
46 KiB
YAML

---
# Matrix-deploy variant overrides for web-app-nextcloud.
# See docs/contributing/artefact/files/role/variants.md for the file format.
#
# nocheck: comments-valid: thirteen variants of ~90 near-identical service lines are
# unreadable without a heading naming what each one adds.
#
# nocheck: variant-limit: the loosely-coupled (bond<1) bridge partners are too heavy
# to co-host, so each budget-bin of them needs its own variant.
#
# nocheck: sso-variant-tor — variant 8 pairs PeerTube, which is clearnet-only since
# 8ffb1f567, so that round cannot pin the onion on.
#
# enabled and shared stay coupled (both true or both false). v0 enables every
# tightly-coupled (bond>=1, same-host) service - the host baseline test_order pins.
# Each later variant adds one budget-bin of loosely-coupled (bond<1, separate-host)
# partners; those are excluded from the closure (bond-aware test_order) so they need
# not appear in v0 and can be distributed to keep every host under budget.
# Variant 0: baseline - all tightly-coupled (bond>=1) services
- services:
container_backup:
enabled: true
sso:
enabled: true
shared: true
coturn:
enabled: true
shared: true
logout:
enabled: true
shared: true
ldap:
enabled: true
shared: true
dashboard:
enabled: true
shared: true
context_agent:
enabled: true
shared: true
matomo:
enabled: true
shared: true
email:
enabled: true
shared: true
mariadb:
shared: true
redis:
shared: true
talk:
enabled: true
shared: true
onlyoffice:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
collabora:
enabled: true
shared: true
bigbluebutton:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
xwiki:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
seaweedfs:
enabled: true
shared: true
css:
enabled: true
shared: true
prometheus:
enabled: true
shared: true
openproject:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
gitlab:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
discourse:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
mattermost:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
matrix:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
zammad:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
openwebui:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
litellm:
enabled: false
mastodon:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
peertube:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
tor:
enabled: true
hermes:
enabled: false
shared: false
openclaw:
enabled: false
shared: false
# Variant 1: minimal - SSO off, no partners
- services:
container_backup:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
sso:
enabled: true
shared: true
coturn:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
logout:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
ldap:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
dashboard:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
context_agent:
enabled: true
shared: true
matomo:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
email:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
mariadb:
shared: false # nocheck: variants-static-override backup shared stays literally true
redis:
shared: false # nocheck: variants-static-override backup shared stays literally true
talk:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
talk_recording:
enabled: false
onlyoffice:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
collabora:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
bigbluebutton:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
xwiki:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
seaweedfs:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
css:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
prometheus:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
openproject:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
gitlab:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
discourse:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
mattermost:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
matrix:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
zammad:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
openwebui:
enabled: true
shared: true
litellm:
enabled: false
mastodon:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
peertube:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
tor:
enabled: true
hermes:
enabled: true
shared: true
openclaw:
enabled: true
shared: true
addons: &addons_static_off
appointments:
enabled: false
calendar:
enabled: false
collectives:
enabled: false
contacts:
enabled: false
cospend:
enabled: false
drawio:
enabled: false
epubviewer:
enabled: false
event_update_notification:
enabled: false
external:
enabled: false
files_bpm:
enabled: false
forms:
enabled: false
gpxpod:
enabled: false
groupfolders:
enabled: false
mail:
enabled: false
metadata:
enabled: false
news:
enabled: false
phonetrack:
enabled: false
polls:
enabled: false
quota_warning:
enabled: false
recognize:
enabled: false
tables:
enabled: false
tasks:
enabled: false
# Variant 2: openwebui
- services:
container_backup:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
sso:
enabled: true
shared: true
coturn:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
logout:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
ldap:
enabled: true
shared: true
dashboard:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
matomo:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
email:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
mariadb:
shared: true
redis:
shared: true
talk:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
talk_recording:
enabled: false
onlyoffice:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
collabora:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
bigbluebutton:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
xwiki:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
seaweedfs:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
css:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
prometheus:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
openproject:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
gitlab:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
discourse:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
mattermost:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
matrix:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
zammad:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
openwebui:
enabled: true
shared: true
litellm:
enabled: false
mastodon:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
peertube:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
tor:
enabled: true
hermes:
enabled: false
shared: false
openclaw:
enabled: false
shared: false
addons: *addons_static_off
# Variant 3: openproject
- services:
container_backup:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
sso:
enabled: true
shared: true
coturn:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
logout:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
ldap:
enabled: true
shared: true
dashboard:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
matomo:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
email:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
mariadb:
shared: true
redis:
shared: true
talk:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
talk_recording:
enabled: false
onlyoffice:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
collabora:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
bigbluebutton:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
xwiki:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
seaweedfs:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
css:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
prometheus:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
openproject:
enabled: true
shared: true
gitlab:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
discourse:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
mattermost:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
matrix:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
zammad:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
openwebui:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
litellm:
enabled: false
mastodon:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
peertube:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
tor:
enabled: true
hermes:
enabled: false
shared: false
openclaw:
enabled: false
shared: false
addons: *addons_static_off
# Variant 4: onlyoffice + mastodon
- services:
container_backup:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
sso:
enabled: true
shared: true
coturn:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
logout:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
ldap:
enabled: true
shared: true
dashboard:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
matomo:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
email:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
mariadb:
shared: true
redis:
shared: true
talk:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
talk_recording:
enabled: false
onlyoffice:
enabled: true
shared: true
collabora:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
bigbluebutton:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
xwiki:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
seaweedfs:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
css:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
prometheus:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
openproject:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
gitlab:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
discourse:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
mattermost:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
matrix:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
zammad:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
openwebui:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
litellm:
enabled: false
mastodon:
enabled: true
shared: true
peertube:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
tor:
enabled: true
hermes:
enabled: false
shared: false
openclaw:
enabled: false
shared: false
addons: *addons_static_off
# Variant 5: zammad
- services:
container_backup:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
sso:
enabled: true
shared: true
coturn:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
logout:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
ldap:
enabled: true
shared: true
dashboard:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
matomo:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
email:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
mariadb:
shared: true
redis:
shared: true
talk:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
talk_recording:
enabled: false
onlyoffice:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
collabora:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
bigbluebutton:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
xwiki:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
seaweedfs:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
css:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
prometheus:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
openproject:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
gitlab:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
discourse:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
mattermost:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
matrix:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
zammad:
enabled: true
shared: true
openwebui:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
litellm:
enabled: false
mastodon:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
peertube:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
tor:
enabled: true
hermes:
enabled: false
shared: false
openclaw:
enabled: false
shared: false
addons: *addons_static_off
# Variant 6: gitlab
- services:
container_backup:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
sso:
enabled: true
shared: true
coturn:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
logout:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
ldap:
enabled: true
shared: true
dashboard:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
matomo:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
email:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
mariadb:
shared: true
redis:
shared: true
talk:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
talk_recording:
enabled: false
onlyoffice:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
collabora:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
bigbluebutton:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
xwiki:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
seaweedfs:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
css:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
prometheus:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
openproject:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
gitlab:
enabled: true
shared: true
discourse:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
mattermost:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
matrix:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
zammad:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
openwebui:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
litellm:
enabled: false
mastodon:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
peertube:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
tor:
enabled: true
hermes:
enabled: false
shared: false
openclaw:
enabled: false
shared: false
addons: *addons_static_off
# Variant 7: discourse
- services:
container_backup:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
sso:
enabled: true
shared: true
coturn:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
logout:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
ldap:
enabled: true
shared: true
dashboard:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
matomo:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
email:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
mariadb:
shared: true
redis:
shared: true
talk:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
talk_recording:
enabled: false
onlyoffice:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
collabora:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
bigbluebutton:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
xwiki:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
seaweedfs:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
css:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
prometheus:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
openproject:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
gitlab:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
discourse:
enabled: true
shared: true
mattermost:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
matrix:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
zammad:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
openwebui:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
litellm:
enabled: true
mastodon:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
peertube:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
tor:
enabled: true
hermes:
enabled: false
shared: false
openclaw:
enabled: false
shared: false
addons: *addons_static_off
# Variant 8: peertube - clearnet, because the OIDC plugin rejects a plaintext onion issuer
- services:
container_backup:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
sso:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
coturn:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
logout:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
ldap:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
dashboard:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
matomo:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
email:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
mariadb:
shared: true
redis:
shared: true
talk:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
talk_recording:
enabled: false
onlyoffice:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
collabora:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
bigbluebutton:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
xwiki:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
seaweedfs:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
css:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
prometheus:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
openproject:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
gitlab:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
discourse:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
mattermost:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
matrix:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
zammad:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
openwebui:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
litellm:
enabled: false
mastodon:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
peertube:
enabled: true
shared: true
tor:
enabled: false
hermes:
enabled: false
shared: false
openclaw:
enabled: false
shared: false
addons: *addons_static_off
# Variant 9: xwiki
- services:
container_backup:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
sso:
enabled: true
shared: true
coturn:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
logout:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
ldap:
enabled: true
shared: true
dashboard:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
matomo:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
email:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
mariadb:
shared: true
redis:
shared: true
talk:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
talk_recording:
enabled: false
onlyoffice:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
collabora:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
bigbluebutton:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
xwiki:
enabled: true
shared: true
seaweedfs:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
css:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
prometheus:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
openproject:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
gitlab:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
discourse:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
mattermost:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
matrix:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
zammad:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
openwebui:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
litellm:
enabled: false
mastodon:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
peertube:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
tor:
enabled: true
hermes:
enabled: false
shared: false
openclaw:
enabled: false
shared: false
addons: *addons_static_off
# Variant 10: mattermost
- services:
container_backup:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
sso:
enabled: true
shared: true
coturn:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
logout:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
ldap:
enabled: true
shared: true
dashboard:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
matomo:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
email:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
mariadb:
shared: true
redis:
shared: true
talk:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
talk_recording:
enabled: false
onlyoffice:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
collabora:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
bigbluebutton:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
xwiki:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
seaweedfs:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
css:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
prometheus:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
openproject:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
gitlab:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
discourse:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
mattermost:
enabled: true
shared: true
matrix:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
zammad:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
openwebui:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
litellm:
enabled: false
mastodon:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
peertube:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
tor:
enabled: true
hermes:
enabled: false
shared: false
openclaw:
enabled: false
shared: false
addons: *addons_static_off
# Variant 11: bigbluebutton - clearnet, because bigbluebutton rides no node onion
- services:
container_backup:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
sso:
enabled: true
shared: true
coturn:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
logout:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
ldap:
enabled: true
shared: true
dashboard:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
matomo:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
email:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
mariadb:
shared: true
redis:
shared: true
talk:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
talk_recording:
enabled: false
onlyoffice:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
collabora:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
bigbluebutton:
enabled: true
shared: true
xwiki:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
seaweedfs:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
css:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
prometheus:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
openproject:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
gitlab:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
discourse:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
mattermost:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
matrix:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
zammad:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
openwebui:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
litellm:
enabled: false
mastodon:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
peertube:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
tor:
enabled: false
hermes:
enabled: false
shared: false
openclaw:
enabled: false
shared: false
addons: *addons_static_off
# Variant 12: matrix
- services:
container_backup:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
sso:
enabled: true
shared: true
coturn:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
logout:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
ldap:
enabled: true
shared: true
dashboard:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
matomo:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
email:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
mariadb:
shared: true
redis:
shared: true
talk:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
talk_recording:
enabled: false
onlyoffice:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
collabora:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
bigbluebutton:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
xwiki:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
seaweedfs:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
css:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
prometheus:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
openproject:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
gitlab:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
discourse:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
mattermost:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
matrix:
enabled: true
shared: true
zammad:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
openwebui:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
litellm:
enabled: false
mastodon:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
peertube:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
tor:
enabled: true
hermes:
enabled: false
shared: false
openclaw:
enabled: false
shared: false
addons: *addons_static_off
# Variant 13: litellm
- services:
container_backup:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
sso:
enabled: true
shared: true
coturn:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
logout:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
ldap:
enabled: true
shared: true
dashboard:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
matomo:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
email:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
mariadb:
shared: true
redis:
shared: true
talk:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
talk_recording:
enabled: false
onlyoffice:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
collabora:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
bigbluebutton:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
xwiki:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
seaweedfs:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
css:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
prometheus:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
openproject:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
gitlab:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
discourse:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
mattermost:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
matrix:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
zammad:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
openwebui:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
litellm:
enabled: true
mastodon:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
peertube:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
tor:
enabled: true
hermes:
enabled: false
shared: false
openclaw:
enabled: false
shared: false
addons: *addons_static_off